luketowers/oc-pwnedpasswords-plugin
An October CMS plugin that checks passwords against the Pwned Passwords (Have I Been Pwned) database to block known-compromised credentials. Adds validation to backend and frontend forms, helping keep accounts secure with minimal setup.
luketowers/oc-pwnedpasswords-plugin adds Have I Been Pwned Pwned Passwords validation to October CMS, helping prevent users from choosing passwords exposed in known data breaches. It uses the k-anonymity range API, sending only a short SHA-1 prefix so plaintext passwords never leave your server.
How can I help you explore Laravel packages today?